SEARCH · PubMed Health

Results for “secured computing”

Explore indexed PubMed citations for clinical trials, systematic reviews and public health research. Read source abstracts and follow each citation to its original PubMed record.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,351 records · Page 75Linked to original sources

PubMed1994

IS & C system and file protection mechanism.

This paper reports a new extension of IS & C (Image Save And Carry) project. Because IS & C is an off-line system and requires full compatibility so as to enable medical data interchange with ease among hospitals and clinics, specifications that are indispensable for compatibility have been standardized by the IS & C committee. The IS & C system is supposed to be used in medicine, so the file protection mechanism for the security of the recorded files has been also developed. The characteristics of IS & C volume and file structure and the second national project being carried out in National Cancer Center Hospital are briefly explained as well.

Computer Communication Networks↗

PubMed2004

High level security policies for health: from theory to practice.

The design and implementation of a security policy for a healthcare organisation is by no means trivial but it is, at least, feasible, taking into account the wide range of information security and privacy enhancing technologies that are currently available. Considering, however, a shared care environment with the participation of many independent healthcare organisations and the requirement for exchanging electronic healthcare records, the situation becomes much more complex since the implementation of global security policy may turn out to be an over ambitious task. This paper aims to highlight the main sources of complexity and to provide pointers for managing or/and resolving them.

Access to Information↗

PubMed1997

Design of access control methods for protecting the confidentiality of patient information in networked systems.

Public awareness of the potential for violation of personal privacy in clinical information systems is increasing. Much of this increase can be attributed to the popularity and publicity of the World Wide Web. Nightly news reports of intruder break-ins and flaws in Internet software security have stimulated public interest in the security of clinical information systems available over the web. As part of the development of systems designed to provide clinical narratives to physicians over the Internet, we are exploring designs that provide additional protection and security to these systems. Specifically, we are developing and testing automated access control measures based on provider-patient relationships for controlling access to personally identifiable patient information.

Computer Communication Networks↗

PubMedDate not supplied

Security aspects of electronic data interchange between a state health department and a hospital emergency department.

Electronic emergency department reporting provides the potential for enhancing local and state surveillance capabilities for a wide variety of syndromes and reportable conditions. The task of protecting data confidentiality and integrity while developing electronic data interchange between a hospital emergency department and a state public health department proved more complex than expected. This case study reports on the significant challenges that had to be resolved to accomplish this goal; these included application restrictions and incompatibilities, technical malfunctions, changing standards, and insufficient dedicated resources. One of the key administrative challenges was that of coordinating project security with enterprise security. The original project has evolved into an ongoing pilot, with the health department currently receiving secure data from the emergency department at four-hour intervals. Currently, planning is underway to add more emergency departments to the project.

Computer Communication Networks↗

PubMed2004

E-mail communication between pediatricians and their patients.

This report addresses specific e-mail patient communication issues relevant to pediatricians and their appropriate use of e-mail in the office setting. The report briefly reviews: 1) e-mail privacy and security concerns; 2) e-mail in the office environment; 3) the legal status of e-mail; and 4) available e-mail technologic solutions.

Communication↗

PubMed1996

The SEISMED guidelines for host systems security.

The increasing use of and reliance upon information technology within modern healthcare establishments underlines a need for adequate security controls to protect the confidentiality, integrity and availability of systems and data. Whilst the consideration of security is now generally accepted as part of the design and implementation of new systems, many systems are already in operation in which these needs have not been adequately addressed. This paper presents a summary of the recommendations arising from the AIM SEISMED (Secure Environment for Information Systems in MEDicine) project relating to the addition and enhancement of security in existing healthcare systems. The paper is based upon material originally presented at the SEISMED Workshop "Security and Legal Aspects of Advanced Health Telematics", Brussels, 11 July 1994. The content has been revised in light of the workshop discussion and the further development of the guidelines since that time.

Computer Security↗

PubMedDate not supplied

Computerized patient records: current and future opportunities.

Although computerized patient record (CPR) technology holds tangible promise for improvements in the quality of patient care, its penetration into physician practices has been slow at best. This article describes the operational and quality of care benefits of CPR implementation and the barriers to implementation. These include technology limitations, cultural factors, lack of standards, downtime fears, security and privacy concerns, and the lack of alignment of economic incentives. The article also provides non-radical approaches (i.e., simpler and cheaper) ways to harness technology to improve office efficiencies and patient care.

Attitude to Computers↗

PubMed1997

Security on the Internet: is your system vulnerable?

Internet technology does not discriminate. Whether or not your system is an intentional target really doesn't matter; you have a duty to ensure its safekeeping. Ten simple steps are given to protect your system from viruses, hackers, etc.

Computer Communication Networks↗

PubMed1994

Integrating non-proprietary workstations into proprietary systems.

'Clinical workstations', increasingly described as pivotal components of information systems for patient care, can be characterized as providing several major functions: access to data, presentation of data, computation (including medical decision logic), entry of data, and combinations of the above, integrated appropriately for various clinical situations. Because workstation technology is developing rapidly on many fronts and the demands on health-care organizations are growing, it is increasingly unlikely that any single total-system solution can effectively meet the needs. This paper discusses some of the issues pertinent to the integration of non-proprietary workstations with proprietary hospital systems. The approach of a particular vendor, the role of a meta-database, user interface design standards, and some problems consequent to the new technologies are discussed.

Computer Security↗

PubMed1998

Installing an appropriate information security policy.

Security of personal health care is of concern to patients, health care staff and informaticians alike. Nevertheless, their awareness of the appropriate measures for protection of such data have been found wanting. The development and implementation of an information and security policy in the health care environment must therefore take into account the attitudes of staff and their educational needs. The approach adopted in one large District General Hospital was to combine risk analysis with surveys of users attitudes to proposed measures and a participational approach to development of security procedures using an adaptation of the ETHICS soft systems methodology. As a result of several years of effort, a 'security culture' has begun to emerge in the organization. However, this can only be sustained by continual promotion of the policy and a willingness to adapt procedures to suit the operating environment.

Attitude of Health Personnel↗

PubMed2000

Development of CPR security using impact analysis.

The HIPAA regulations will require that institutions ensure the prevention of unauthorized access to electronically stored or transmitted patient records. This paper discusses a process for analyzing the impact of security mechanisms on users of computerized patient records through "behind the scenes" electronic access audits. In this way, those impacts can be assessed and refined to an acceptable standard prior to implementation. Through an iterative process of design and evaluation, we develop security algorithms that will protect electronic health information from improper access, alteration or loss, while minimally affecting the flow of work of the user population as a whole.

Algorithms↗

PubMed2003

Change in FDA stance on Part 11 Requirements.

The United States Food and Drug Administration (FDA) has decided to reexamine its regulations for electronic records and signatures, and during this process, to reduce the enforcement of some of the provisions of the regulations. This article discusses FDA's decision and the content of its related, recently issued guidance document.

Authorship↗

PubMed2003

Rightsizing HIPAA security compliance for smaller organizations.

The HIPAA security and privacy requirements are specifically designed using guidelines rather than hard and fast standards. These guidelines provide flexibility in scaling solutions for small to large organizations to address the law as well as to accommodate advances in technology. However, this very flexibility causes a quandary for smaller organizations because it's unclear how far an organization can scale back and still meet the law's requirements. This is particularly problematic in the security area, where over 20 guidelines permit a wide range of interpretation. This article addresses how much is enough and how to make defensible decisions in HIPAA implementation for smaller healthcare organizations.

Awareness↗

PubMed2001

New FDA guidance on electronic records and signatures.

The United States Food and Drug Administration (FDA) is in the process of developing and issuing a series of guidance documents on electronic records and signatures requirements. This article discusses two recently published FDA guidance documents: validation requirements for electronic records and signatures and a glossary of terms. It also highlights the need for industry to provide comments on these documents to FDA.

Authorship↗

PubMed1997

The Internet and randomised controlled trials.

Several factors constrain the implementation of Randomised Controlled Trials (RCTs). To obtain large sample sizes a multicentred multinational trial may be necessary or a long sampling period. The larger the trial the larger is the unit cost. To allow larger sample sizes, shorter sampling periods and lower unit costs, new methods are needed. The Internet and in particular the WWW provides such an opportunity. The WWW can provide global access, fast interaction and automation. A prototype Internet Trials Service (ITS) is currently being tested with a real international clinical trial (the Growth Restriction Intervention Trial--GRIT). The ITS is hosted on a Web server. It provides a series of HTML documents that describe the GRIT protocol. Registered centres may enter patients into the GRIT trial via ITS. Java applets are used to collect trial data before returning the study number and randomisation. ITS assumes all trial data will be intercepted by a sniffer. Therefore no information is sent that could specifically identify a patient, this must be sent later by more secure means. ITS assumes that trial centres can be spoofed. To authenticate the patients entered into the trial and the trial data sent, a regular audit report is sent to each centre by secure means for confirmation. By using Java, a full functional data entry system can be developed that runs locally within any Java enabled browser. It can perform data validation locally and also provide a sophisticated user interface.

Child Development↗

PubMed2004

GeneX Va: VBC open source microarray database and analysis software.

Developed by the Virginia Bioinformatics Consortium (VBC), GeneX Va is an open source, freeware database and bioinformatics analysis software for archiving and analyzing Affymetrix GeneChip data. It provides an integrated framework for management, documentation, and analysis of microarray experiments and data to support a range of users, from individual research laboratories to institutional microarray facilities. GeneX Va also provides web-based access to a PostgreSQL relational database system with a comprehensive security system. Data can be extracted from the database and delivered to interactive or scriptable statistical analysis protocols. The security system allows each investigator to manage their own array data and analysis output files and also provides custom access privileges for other users, groups, and internal/external collaborators. The analysis interface uses "Analysis Trees," an innovative user interface that allows researchers to interactively create a tree-structured flow chart of analysis routines. The latest GeneX Va software is available from and can be freely downloaded at the Sourceforge web site http://va-genex.sourceforge.net. To allow researchers to access the database and analysis capabilities of the GeneX Va system, microarray data from many VBC GeneChip experiments have been deposited into a public section of the GeneX Va system at the University of Virginia. The VBC GeneX Va sites, which include documentation, are at http://genes.med.virginia.edu/ of the University of Virginia and at http://genex.csbc.vcu.edu/ of the Virginia Commonwealth University.

Computer Security↗

PubMedDate not supplied

Medical records. Enhancing privacy, preserving the common good.

Personal medical information is now bought and sold on the open market. Companies use it to make hiring and firing decisions and to identify customers for new products. The justification for providing such access to medical information is that doing so benefits the public by securing public safety, controlling costs, and supporting medical research. And individuals have supposedly consented to it. But we can achieve the common goods while better protecting privacy by making institutional changes in the way information is maintained and protected.

Computer Security↗

PubMed2001

HIPAA standards offer more accuracy and eventual cost savings.

More than four years after passage of the Health Insurance Portability and Accountability Act (HIPAA), HHS has yet to issue final rules regarding implementation of many of the statute's provisions. Of immediate concern to the healthcare industry are the final rules regarding electronic transactions and privacy and the proposed rule regarding security. The electronic transactions final rule addresses seven transaction types covered by HIPAA. The final rule mandates the use of standard implementation guides developed by the American National Standards Institute and specifies which code sets are to be used with each type of transaction. Under the security proposed rule, covered entities would be required to develop a security plan addressing four specific areas. Under the privacy final rule, covered entities must meet specific requirements regarding patients rights, including obtaining consent or, in some instances, authorization to use and disclose patients' personal health information.

Computer Communication Networks↗